Compare commits
13 Commits
master
...
feature-2l
Author | SHA1 | Date | |
---|---|---|---|
|
919ef43d60 | ||
|
d34a5e2708 | ||
|
85334e382c | ||
|
abdd641ac2 | ||
|
1a1bf5ac64 | ||
|
a0643aca87 | ||
|
57aa82cf8c | ||
|
14da06e02b | ||
3b652fc6b0 | |||
2b923e4c96 | |||
|
9175f34e52 | ||
f3f74f56dd | |||
|
31de830d2e |
@ -6,46 +6,39 @@
|
|||||||
#$4 - ${{ needs.build-process.outputs.repo }}
|
#$4 - ${{ needs.build-process.outputs.repo }}
|
||||||
#$5 - ${{ gitea.workspace }}
|
#$5 - ${{ gitea.workspace }}
|
||||||
|
|
||||||
branch=${1:-"sisyphus"}
|
|
||||||
org=${2:-"alt"}
|
|
||||||
url=${3:-"gitea.basealt.ru"}
|
|
||||||
repo=${4:-"alt"}
|
|
||||||
wosp=${5:-"."}
|
|
||||||
|
|
||||||
errors=''
|
errors=''
|
||||||
haserr=false
|
haserr=false
|
||||||
for IM in $(ls $wosp/org/$org/ | xargs)
|
for IM in $(ls $5/org/$2/ | xargs)
|
||||||
do
|
do
|
||||||
echo "image=$IM"
|
echo "image=$IM"
|
||||||
if test -f $wosp/org/$org/$IM/test
|
if test -f $5/org/$2/$IM/test
|
||||||
then
|
then
|
||||||
test=$(cat $wosp/org/$org/$IM/test)
|
test=$(cat $5/org/$2/$IM/test)
|
||||||
else test=''
|
else test=''
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo "test script=$test"
|
echo "test script=$test"
|
||||||
imgpath="$repo/$branch/$IM:latest"
|
imgpath="$2/$IM:$1"
|
||||||
|
|
||||||
entrypoint='/bin/sh'
|
if [[ $2 == 'k8s' ]]
|
||||||
|
then imgpath="$2-$1/$IM:latest"
|
||||||
|
fi
|
||||||
|
|
||||||
command="echo empty_command"
|
command="echo empty_command"
|
||||||
if [ -n "$test" ]; then
|
if [[ $test != '' ]]; then
|
||||||
command="podman run --rm --entrypoint=\"$entrypoint\" $url/$imgpath -c \"$test\""
|
command="podman run --rm --entrypoint=\"/bin/sh\" $3/$imgpath -c \"$test\""
|
||||||
else
|
else
|
||||||
if [[ "$IM" == distroless-toybox ]]; then
|
if [[ $IM = 'distroless-true' ]]; then
|
||||||
command="podman run --rm $url/$imgpath toysh -c true"
|
command="podman run --rm $3/$imgpath \"true\""
|
||||||
fi
|
fi
|
||||||
if [ "$IM" = distroless-true ]; then
|
if [[ $IM = 'distroless-gotop' ]]; then
|
||||||
command="podman run --rm $url/$imgpath \"true\""
|
command="podman run --rm $3/$imgpath \"--version\""
|
||||||
fi
|
|
||||||
if [ "$IM" = distroless-gotop ]; then
|
|
||||||
command="podman run --rm $url/$imgpath \"--version\""
|
|
||||||
fi
|
fi
|
||||||
if [ "$IM" = flannel-cni-plugin ]; then
|
if [[ $IM = 'flannel-cni-plugin' ]]; then
|
||||||
command="podman run --rm $url/$imgpath \"/flannel\""
|
command="podman run --rm $3/$imgpath \"/flannel\""
|
||||||
fi
|
fi
|
||||||
if [ "$IM" == pause ]; then
|
if [[ $IM = 'pause' ]]; then
|
||||||
command="podman run --rm $url/$imgpath \"/pause\" \"-v\""
|
command="podman run --rm $3/$imgpath \"/pause\" \"-v\""
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
echo $command
|
echo $command
|
||||||
@ -54,9 +47,9 @@ do
|
|||||||
echo "podman rmi --all"
|
echo "podman rmi --all"
|
||||||
podman rmi --all
|
podman rmi --all
|
||||||
|
|
||||||
if [ "$haserr" ]
|
if [ "$haserr" = true ]
|
||||||
then
|
then
|
||||||
if [[ -n $(cat $IM.log) ]]
|
if [[ $(cat $IM.log) != '' ]]
|
||||||
then errors="TEST ERROR OF IMAGE $IM: $(cat $IM.log); $errors"
|
then errors="TEST ERROR OF IMAGE $IM: $(cat $IM.log); $errors"
|
||||||
else errors="TEST ERROR OF IMAGE $IM: test returned empty error, but exit status was nozero; $errors"
|
else errors="TEST ERROR OF IMAGE $IM: test returned empty error, but exit status was nozero; $errors"
|
||||||
fi
|
fi
|
||||||
@ -65,7 +58,7 @@ do
|
|||||||
done
|
done
|
||||||
|
|
||||||
echo "$errors"
|
echo "$errors"
|
||||||
if [ -n "$errors" ]
|
if [[ $errors != '' ]]
|
||||||
then haserr=true
|
then haserr=true
|
||||||
fi
|
fi
|
||||||
echo "ERR=$haserr" > haserr.log
|
echo "ERR=$haserr" > haserr.log
|
||||||
|
@ -1,48 +1,49 @@
|
|||||||
name: Building alt images
|
name: Full building alt images
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
tags:
|
tags:
|
||||||
- '*_*/*_*'
|
- '*10*_*'
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build-process:
|
build-process:
|
||||||
runs-on: alt-sisyphus
|
runs-on: alt-p10
|
||||||
outputs:
|
outputs:
|
||||||
branch: ${{ env.BRANCH }}
|
branch: ${{ env.BRANCH }}
|
||||||
image: ${{ env.IMAGE }}
|
org: ${{ env.ORG }}
|
||||||
url: ${{ env.URL }}
|
url: ${{ env.URL }}
|
||||||
repo: ${{ env.REPO }}
|
repo: ${{ env.REPO }}
|
||||||
buildres: ${{ steps.build-script.outcome }}
|
buildres: ${{ steps.build-script.outcome }}
|
||||||
test: ${{ env.TEST }}
|
|
||||||
steps:
|
steps:
|
||||||
- name: Check workspace
|
- name: Check workspace
|
||||||
run: |
|
run: |
|
||||||
repourl=$(echo $GU | cut -d '/' -f 3)
|
repourl=$(echo $GU | cut -d '/' -f 3)
|
||||||
echo "URL=$repourl" >> ${GITHUB_ENV}
|
echo "URL=$repourl" >> ${GITHUB_ENV}
|
||||||
echo "URL=$repourl"
|
echo $repourl
|
||||||
reponame=$(echo $GR | cut -d '/' -f 1)
|
reponame=$(echo $GR | cut -d '/' -f 1)
|
||||||
echo "REPO=$reponame" >> ${GITHUB_ENV}
|
echo "REPO=$reponame" >> ${GITHUB_ENV}
|
||||||
echo "REPO=$reponame"
|
echo $reponame
|
||||||
env:
|
env:
|
||||||
GU: ${{ gitea.server_url }}
|
GU: ${{ gitea.server_url }}
|
||||||
GR: ${{ gitea.repository }}
|
GR: ${{ gitea.repository }}
|
||||||
- name: Set repo for c10f2 (Temporary)
|
|
||||||
if: ${{ contains(github.ref_name, 'c10f2') }}
|
|
||||||
run: |
|
|
||||||
echo "event tag=${{ github.ref_name }}"
|
|
||||||
echo "10.4.0.3 update.altsp.su" >> /etc/hosts
|
|
||||||
echo "cat /etc/hosts"
|
|
||||||
cat /etc/hosts
|
|
||||||
- name: Update apt
|
- name: Update apt
|
||||||
uses: actions/init-alt-env@v1
|
uses: actions/init-alt-env@v1
|
||||||
- name: Install requires
|
- name: Install requires
|
||||||
run: |
|
run: |
|
||||||
echo "apt-get install -y python3-module-tomli python3-module-jinja2 python3-module-yaml python3-module-requests podman buildah jq curl"
|
echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
|
||||||
apt-get install -y python3-module-tomli python3-module-jinja2 python3-module-yaml python3-module-requests podman buildah jq curl
|
apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
|
||||||
echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc qemu-user-static-binfmt-riscv qemu-user-static-binfmt-loongarch"
|
echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc"
|
||||||
apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc qemu-user-static-binfmt-riscv qemu-user-static-binfmt-loongarch
|
apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc
|
||||||
- name: Check out current repo
|
- name: Check out current repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
|
- name: Parse target branch and tag from events context, save to env
|
||||||
|
env:
|
||||||
|
EV: ${{ toJson(gitea.event) }}
|
||||||
|
run: |
|
||||||
|
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
|
||||||
|
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
|
||||||
|
org=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
|
||||||
|
echo "ORG=$org" >> ${GITHUB_ENV}
|
||||||
|
echo "ORG=$org"
|
||||||
- name: Login podman gitea
|
- name: Login podman gitea
|
||||||
run: |
|
run: |
|
||||||
echo "podman login ${{ env.URL }}"
|
echo "podman login ${{ env.URL }}"
|
||||||
@ -50,62 +51,35 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
P_USER: ${{ secrets.PODMAN_USER }}
|
P_USER: ${{ secrets.PODMAN_USER }}
|
||||||
P_PASS: ${{ secrets.PODMAN_PASS }}
|
P_PASS: ${{ secrets.PODMAN_PASS }}
|
||||||
- name: Check files in the repository
|
|
||||||
run: |
|
|
||||||
ls -a ${{ gitea.workspace }}
|
|
||||||
- name: Parse target branch and tag from events context, save to env
|
|
||||||
env:
|
|
||||||
EV: ${{ toJson(gitea.event) }}
|
|
||||||
run: |
|
|
||||||
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
|
|
||||||
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
|
|
||||||
localimage=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
|
|
||||||
echo "IMAGE=$localimage" >> ${GITHUB_ENV}
|
|
||||||
echo "IMAGE=$localimage"
|
|
||||||
org=$(echo "$localimage" | cut -d '/' -f 1)
|
|
||||||
echo "ORG=$org" >> ${GITHUB_ENV}
|
|
||||||
echo "ORG=$org"
|
|
||||||
ver=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 3)
|
|
||||||
echo "VER=$ver" >> ${GITHUB_ENV}
|
|
||||||
echo "VER=$ver"
|
|
||||||
- name: Get test for image
|
|
||||||
run: |
|
|
||||||
if test -f ${{ gitea.workspace }}/org/$IM/test; then testscript=$(cat ${{ gitea.workspace }}/org/$IM/test); else testscript=""; fi
|
|
||||||
echo "TEST=$testscript" >> ${GITHUB_ENV}
|
|
||||||
env:
|
|
||||||
IM: ${{ env.IMAGE }}
|
|
||||||
BR: ${{ env.BRANCH }}
|
|
||||||
- name: Run building script
|
- name: Run building script
|
||||||
id: build-script
|
id: build-script
|
||||||
run: |
|
run: |
|
||||||
if [[ "$IM" == *"k8s"* ]]; then k8sarg="--overwrite-organization $ORG-$BR --package-versions {\"$IM\":\"$VER\"}"; else k8sarg=""; fi
|
build_args="-b $BR -o $ORG --skip-images alt/distroless-devel"
|
||||||
if [[ "$BR" == "sisyphus" ]]; then arches="--arches amd64 386 arm64 loong64"; else arches="--arches amd64 386 arm64"; fi
|
if [[ $BR == 'c10f1' || $BR == 'c10f2' ]]; then build_args="$build_args --skip-arches arm ppc64le"; fi
|
||||||
echo "build.py -i $IM -b $BR $arches $k8sarg"
|
if [[ $ORG == 'k8s' ]]; then build_args="$build_args --tags tags.toml --overwrite-organization $ORG-$BR --skip-images k8s/kube-apiserver k8s/kube-controller-manager k8s/kube-proxy k8s/kube-scheduler"; fi
|
||||||
${{ gitea.workspace }}/build.py -i $IM -b $BR $arches $k8sarg
|
echo "build.py $build_args"
|
||||||
|
${{ gitea.workspace }}/build.py $build_args
|
||||||
env:
|
env:
|
||||||
IM: ${{ env.IMAGE }}
|
|
||||||
VER: ${{ env.VER }}
|
|
||||||
BR: ${{ env.BRANCH }}
|
|
||||||
ORG: ${{ env.ORG }}
|
ORG: ${{ env.ORG }}
|
||||||
|
BR: ${{ env.BRANCH }}
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
- name: Send notification if build crashed
|
- name: Send notification if build crashed
|
||||||
if: ${{ steps.build-script.outcome != 'success' }}
|
if: ${{ steps.build-script.outcome != 'success' }}
|
||||||
run: |
|
run: |
|
||||||
issueid=1
|
issueid=1
|
||||||
body="Building image $IM finish with some errors."
|
body="Building images finish with some errors."
|
||||||
curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
|
curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
|
||||||
echo "notification about test error is sent to issue $issueid"
|
echo "notification about test error is sent to issue $issueid"
|
||||||
env:
|
env:
|
||||||
T: ${{ secrets.TOKEN }}
|
T: ${{ secrets.TOKEN }}
|
||||||
BR: ${{ env.BRANCH }}
|
BR: ${{ env.BRANCH }}
|
||||||
URL: ${{ gitea.server_url }}
|
URL: ${{ gitea.server_url }}
|
||||||
REPO: ${{ env.REPO }}
|
REPO: ${{ env.REPO }}
|
||||||
IM: ${{ env.IMAGE }}
|
|
||||||
- name: Delete event tag
|
- name: Delete event tag
|
||||||
run: |
|
run: |
|
||||||
tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
|
tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
|
||||||
curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
|
curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
|
||||||
echo "tag $tagname is deleted"
|
echo "tag $tagname is deleted"
|
||||||
env:
|
env:
|
||||||
T: ${{ secrets.TOKEN }}
|
T: ${{ secrets.TOKEN }}
|
||||||
BR: ${{ env.BRANCH }}
|
BR: ${{ env.BRANCH }}
|
||||||
@ -115,50 +89,39 @@ jobs:
|
|||||||
test-process:
|
test-process:
|
||||||
needs: build-process
|
needs: build-process
|
||||||
if: ${{ needs.build-process.outputs.buildres == 'success' }}
|
if: ${{ needs.build-process.outputs.buildres == 'success' }}
|
||||||
runs-on: alt-sisyphus
|
runs-on: alt-p10
|
||||||
steps:
|
steps:
|
||||||
- name: Update apt
|
- name: Update apt
|
||||||
uses: https://gitea.basealt.ru/actions/init-alt-env@v1
|
uses: actions/init-alt-env@v1
|
||||||
- name: Install requires
|
- name: Install requires
|
||||||
run: |
|
run: |
|
||||||
echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah curl"
|
echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
|
||||||
apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah curl
|
apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
|
||||||
- name: Run test
|
- name: Check out current repo
|
||||||
|
uses: https://gitea.com/actions/checkout@v4
|
||||||
|
- name: Test
|
||||||
id: test-script
|
id: test-script
|
||||||
if: ${{ needs.build-process.outputs.test != '' }}
|
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
run: |
|
run: |
|
||||||
if [[ "$IM" == *"k8s"* ]]; then echo "skip tests for k8s images"; else podman run --rm --entrypoint="/bin/sh" $URL/$IM:$BR -c "$TEST"; fi
|
$WS/.gitea/workflows/testscript $BR $ORG $URL $REPO $WS
|
||||||
|
cat haserr.log >> ${GITHUB_ENV}
|
||||||
|
echo "test process finished"
|
||||||
env:
|
env:
|
||||||
IM: ${{ needs.build-process.outputs.image }}
|
|
||||||
BR: ${{ needs.build-process.outputs.branch }}
|
|
||||||
URL: ${{ needs.build-process.outputs.url }}
|
|
||||||
REPO: ${{ needs.build-process.outputs.repo }}
|
|
||||||
TEST: ${{ needs.build-process.outputs.test }}
|
|
||||||
- name: Run special test
|
|
||||||
id: special-test
|
|
||||||
if: ${{ needs.build-process.outputs.test == '' }}
|
|
||||||
continue-on-error: true
|
|
||||||
run: |
|
|
||||||
if [[ $IM = 'alt/distroless-true' ]]; then podman run --rm $URL/$IM:$BR true; fi
|
|
||||||
if [[ $IM = 'alt/distroless-gotop' ]]; then podman run --rm $URL/$IM:$BR --version; fi
|
|
||||||
env:
|
|
||||||
IM: ${{ needs.build-process.outputs.image }}
|
|
||||||
BR: ${{ needs.build-process.outputs.branch }}
|
BR: ${{ needs.build-process.outputs.branch }}
|
||||||
|
ORG: ${{ needs.build-process.outputs.org }}
|
||||||
URL: ${{ needs.build-process.outputs.url }}
|
URL: ${{ needs.build-process.outputs.url }}
|
||||||
REPO: ${{ needs.build-process.outputs.repo }}
|
REPO: ${{ needs.build-process.outputs.repo }}
|
||||||
|
WS: ${{ gitea.workspace }}
|
||||||
- name: Send notification if test crashed
|
- name: Send notification if test crashed
|
||||||
if: ${{ steps.test-script.outcome == 'failure' || steps.special-test.outcome == 'failure' }}
|
if: ${{ env.ERR == 'true' || steps.test-script.outcome == 'failure' }}
|
||||||
run: |
|
run: |
|
||||||
issueid=1
|
issueid=1
|
||||||
errors=$(cat errors.log)
|
errors=$(cat errors.log)
|
||||||
body="Testing image $IM finish with some errors."
|
body="Testing images finish with some errors. $errors"
|
||||||
curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
|
curl -X 'POST' "$URL/api/v1/repos/$REPO/image-forge/issues/$issueid/comments?token=$T" -H 'accept: application/json' -H 'Content-Type: application/json' -d "{ \"body\": \"$body\" }" -s
|
||||||
echo "notification about test error is sent to issue $issueid"
|
echo "notification about test error is sent to issue $issueid"
|
||||||
env:
|
env:
|
||||||
T: ${{ secrets.TOKEN }}
|
T: ${{ secrets.TOKEN }}
|
||||||
BR: ${{ needs.build-process.outputs.branch }}
|
BR: ${{ needs.build-process.outputs.branch }}
|
||||||
URL: ${{ gitea.server_url }}
|
URL: ${{ gitea.server_url }}
|
||||||
REPO: ${{ needs.build-process.outputs.repo }}
|
REPO: ${{ needs.build-process.outputs.repo }}
|
||||||
IM: ${{ needs.build-process.outputs.image }}
|
|
||||||
|
|
@ -2,7 +2,7 @@ name: Full building alt images
|
|||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
tags:
|
tags:
|
||||||
- '*_*'
|
- 'sisyphus_*'
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build-process:
|
build-process:
|
||||||
@ -25,47 +25,40 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
GU: ${{ gitea.server_url }}
|
GU: ${{ gitea.server_url }}
|
||||||
GR: ${{ gitea.repository }}
|
GR: ${{ gitea.repository }}
|
||||||
- name: Set repo for c10f2 (Temporary)
|
|
||||||
if: ${{ contains(github.ref_name, 'c10f2') }}
|
|
||||||
run: |
|
|
||||||
echo "event tag=${{ github.ref_name }}"
|
|
||||||
echo "10.4.0.3 update.altsp.su" >> /etc/hosts
|
|
||||||
echo "cat /etc/hosts"
|
|
||||||
cat /etc/hosts
|
|
||||||
- name: Update apt
|
- name: Update apt
|
||||||
uses: actions/init-alt-env@v1
|
uses: actions/init-alt-env@v1
|
||||||
- name: Install requires
|
- name: Install requires
|
||||||
run: |
|
run: |
|
||||||
echo "apt-get install -y python3-module-tomli python3-module-jinja2 python3-module-yaml python3-module-requests podman buildah jq curl"
|
echo "apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl"
|
||||||
apt-get install -y python3-module-tomli python3-module-jinja2 python3-module-yaml python3-module-requests podman buildah jq curl
|
apt-get install -y python3-module-tomli python3-module-jinja2 podman buildah jq curl
|
||||||
echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc qemu-user-static-binfmt-riscv qemu-user-static-binfmt-loongarch"
|
echo "apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc"
|
||||||
apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc qemu-user-static-binfmt-riscv qemu-user-static-binfmt-loongarch
|
apt-get install -y qemu-user-static-binfmt-aarch64 qemu-user-static-binfmt-arm qemu-user-static-binfmt-ppc
|
||||||
- name: Check out current repo
|
- name: Check out current repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
- name: Parse target branch and tag from events context, save to env
|
- name: Parse target branch and tag from events context, save to env
|
||||||
env:
|
env:
|
||||||
EV: ${{ toJson(gitea.event) }}
|
EV: ${{ toJson(gitea.event) }}
|
||||||
run: |
|
run: |
|
||||||
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
|
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1
|
||||||
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
|
echo $EV | jq '.ref' -r | sed "s/refs\/tags\//BRANCH=/g" | cut -d '_' -f 1 >> ${GITHUB_ENV}
|
||||||
org=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
|
org=$(echo $EV | jq '.ref' -r | sed 's/refs\/tags\///g' | cut -d '_' -f 2)
|
||||||
echo "ORG=$org" >> ${GITHUB_ENV}
|
echo "ORG=$org" >> ${GITHUB_ENV}
|
||||||
echo "ORG=$org"
|
echo "ORG=$org"
|
||||||
- name: Login podman gitea
|
- name: Login podman gitea
|
||||||
run: |
|
run: |
|
||||||
echo "podman login ${{ env.URL }}"
|
echo "podman login ${{ env.URL }}"
|
||||||
podman login --username $P_USER --password $P_PASS ${{ env.URL }}
|
podman login --username $P_USER --password $P_PASS ${{ env.URL }}
|
||||||
env:
|
env:
|
||||||
P_USER: ${{ secrets.PODMAN_USER }}
|
P_USER: ${{ secrets.PODMAN_USER }}
|
||||||
P_PASS: ${{ secrets.PODMAN_PASS }}
|
P_PASS: ${{ secrets.PODMAN_PASS }}
|
||||||
- name: Run building script
|
- name: Run building script
|
||||||
id: build-script
|
id: build-script
|
||||||
run: |
|
run: |
|
||||||
build_args="-b $BR -o $ORG --skip-images alt/distroless-devel"
|
build_args="-b $BR -o $ORG --skip-images alt/distroless-devel"
|
||||||
if [[ "$BR" == "sisyphus" ]]; then arches="--arches amd64 386 arm64 loong64"; else arches="--arches amd64 386 arm64"; fi
|
if [[ $BR == 'sisyphus' ]]; then build_args="$build_args --skip-arches arm"; fi
|
||||||
if [[ "$ORG" == "k8s" ]]; then build_args="$build_args --overwrite-organization $ORG-$BR --package-versions {\"k8s/kube-apiserver\":\"1.31\",\"k8s/kube-scheduler\":\"1.31\",\"k8s/kube-controller-manager\":\"1.31\",\"k8s/kube-proxy\":\"1.31\",\"k8s/coredns\":\"1.11.3\",\"k8s/kubelet\":\"1.31\"}"; fi
|
if [[ $ORG == 'k8s' ]]; then build_args="$build_args --tags tags.toml --overwrite-organization $ORG-$BR --skip-images k8s/kube-apiserver k8s/kube-controller-manager k8s/kube-proxy k8s/kube-scheduler"; fi
|
||||||
echo "build.py $build_args $arches"
|
echo "build.py $build_args"
|
||||||
${{ gitea.workspace }}/build.py $build_args $arches
|
${{ gitea.workspace }}/build.py $build_args
|
||||||
env:
|
env:
|
||||||
ORG: ${{ env.ORG }}
|
ORG: ${{ env.ORG }}
|
||||||
BR: ${{ env.BRANCH }}
|
BR: ${{ env.BRANCH }}
|
||||||
@ -86,7 +79,7 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
|
tagname=$(echo $EV | jq '.ref' -r | sed "s/refs\/tags\///g")
|
||||||
curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
|
curl -X 'DELETE' "$URL/api/v1/repos/$REPO/image-forge/tags/$tagname?token=$T" -H 'accept: application/json' -s
|
||||||
echo "tag $tagname is deleted"
|
echo "tag $tagname is deleted"
|
||||||
env:
|
env:
|
||||||
T: ${{ secrets.TOKEN }}
|
T: ${{ secrets.TOKEN }}
|
||||||
BR: ${{ env.BRANCH }}
|
BR: ${{ env.BRANCH }}
|
||||||
@ -95,7 +88,7 @@ jobs:
|
|||||||
EV: ${{ toJson(gitea.event) }}
|
EV: ${{ toJson(gitea.event) }}
|
||||||
test-process:
|
test-process:
|
||||||
needs: build-process
|
needs: build-process
|
||||||
if: ${{ needs.build-process.outputs.buildres == 'success' && needs.build-process.outputs.org != 'k8s' }}
|
if: ${{ needs.build-process.outputs.buildres == 'success' }}
|
||||||
runs-on: alt-sisyphus
|
runs-on: alt-sisyphus
|
||||||
steps:
|
steps:
|
||||||
- name: Update apt
|
- name: Update apt
|
1
.gitignore
vendored
1
.gitignore
vendored
@ -1 +0,0 @@
|
|||||||
Dockerfile
|
|
61
README.md
61
README.md
@ -26,70 +26,9 @@ the organization `<ORGANIZATION>`, run:
|
|||||||
```
|
```
|
||||||
If you push to the users repository, then organiztion is your username.
|
If you push to the users repository, then organiztion is your username.
|
||||||
|
|
||||||
## info.yaml format
|
|
||||||
|
|
||||||
- `is_versioned`: **bool** (REQUIRED)
|
|
||||||
|
|
||||||
Whether to use package version as a tag for this image
|
|
||||||
|
|
||||||
- `source_packages`: **list of strings** (REQUIRED)
|
|
||||||
|
|
||||||
List of source packages (src.rpm) this image depends on.
|
|
||||||
If contains jinja2 template syntax, `--package-version`
|
|
||||||
CLI option must be specified.
|
|
||||||
|
|
||||||
- `version_template`: **string** (OPTIONAL)
|
|
||||||
|
|
||||||
template to apply when construction the tag,
|
|
||||||
`version` string variable is available in the template
|
|
||||||
|
|
||||||
### examples
|
|
||||||
|
|
||||||
|
|
||||||
#### org/k8s/flannel-cni-plugin
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
is_versioned: true
|
|
||||||
version_template: v{{ version.rsplit('.', 1) | first }}-flannel{{ version.rsplit('.', 1) | last }}
|
|
||||||
source_packages:
|
|
||||||
- cni-plugin-flannel
|
|
||||||
```
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./build.py -i k8s/flannel-cni-plugin
|
|
||||||
```
|
|
||||||
|
|
||||||
#### org/k8s/kube-apiserver
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
is_versioned: true
|
|
||||||
version_template: v{{ version }}
|
|
||||||
source_packages:
|
|
||||||
- kubernetes{{ version }}
|
|
||||||
```
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./build.py -b sisyphus -i k8s/kube-apiserver --package-version '{"k8s/kube-apiserver": "1.31"}'
|
|
||||||
```
|
|
||||||
|
|
||||||
#### org/k8s/pause
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
is_versioned: true
|
|
||||||
source_packages:
|
|
||||||
- kubernetes-pause
|
|
||||||
```
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./build.py -i k8s/pause
|
|
||||||
```
|
|
||||||
|
|
||||||
## Dependencies
|
## Dependencies
|
||||||
On x86_64 machine using p10 branch you need:
|
On x86_64 machine using p10 branch you need:
|
||||||
- `python3-module-tomli`
|
- `python3-module-tomli`
|
||||||
- `python3-module-jinja2`
|
|
||||||
- `python3-module-yaml`
|
|
||||||
- `python3-module-requests`
|
|
||||||
- `qemu-user-static-binfmt-aarch64` to build for arm64 architecture
|
- `qemu-user-static-binfmt-aarch64` to build for arm64 architecture
|
||||||
- `qemu-user-static-binfmt-arm` to build for arm architecture
|
- `qemu-user-static-binfmt-arm` to build for arm architecture
|
||||||
- `qemu-user-static-binfmt-ppc` to build for ppc64le architecture
|
- `qemu-user-static-binfmt-ppc` to build for ppc64le architecture
|
||||||
|
153
branch/README.md
Normal file
153
branch/README.md
Normal file
@ -0,0 +1,153 @@
|
|||||||
|
# Описание структуры каталогов для автоматизации рабочео процесса создания образов
|
||||||
|
|
||||||
|
## Общая структура каталогов
|
||||||
|
|
||||||
|
- Вместо каталога `org` предлагается использовать каталог `branch`
|
||||||
|
|
||||||
|
- Каталог `branch` содержит подкаталога бранчей (платформ):
|
||||||
|
* `sisyphus`;
|
||||||
|
* `p10`;
|
||||||
|
* `c10f1`;
|
||||||
|
* `c10f2`;
|
||||||
|
* ...
|
||||||
|
|
||||||
|
Подкаталоги бранчей содержат дерево групп образов.
|
||||||
|
|
||||||
|
Корневая группа `base` содержит образы, которые тегируются по дате создания.
|
||||||
|
Остальные группы тегируются по версии основного ПО, входящего в состав образа.
|
||||||
|
|
||||||
|
Каталог группы может содержать yml-файл `images.yml` описания группы.
|
||||||
|
|
||||||
|
Пример дерева описания образов:
|
||||||
|
<pre>
|
||||||
|
branch/sisyphus/
|
||||||
|
├── apache
|
||||||
|
├── base
|
||||||
|
│ ├── alt
|
||||||
|
│ ├── buildpack
|
||||||
|
│ │ ├── buildpack-deps-curl
|
||||||
|
│ │ └── buildpack-deps-scm
|
||||||
|
│ ├── devel
|
||||||
|
│ ├── distroless
|
||||||
|
│ │ ├── distroless-base
|
||||||
|
│ │ ├── distroless-builder
|
||||||
|
│ │ ├── distroless-devel
|
||||||
|
│ │ ├── distroless-gotop
|
||||||
|
│ │ ├── distroless-static
|
||||||
|
│ │ └── distroless-true
|
||||||
|
│ ├── systemd
|
||||||
|
│ └── unit
|
||||||
|
├── cert-manager
|
||||||
|
│ ├── cert-manager-cainjector
|
||||||
|
│ ├── cert-manager-controller
|
||||||
|
│ └── cert-manager-webhook
|
||||||
|
├── cni
|
||||||
|
│ └── flannel
|
||||||
|
│ ├── flannel
|
||||||
|
│ └── flannel-cni-plugin
|
||||||
|
├── gitea
|
||||||
|
├── k8s
|
||||||
|
│ ├── coredns
|
||||||
|
│ ├── deckhouse
|
||||||
|
│ │ ├── coredns
|
||||||
|
│ │ ├── etcd
|
||||||
|
│ │ ├── kube-apiserver
|
||||||
|
│ │ ├── kube-controller-manager
|
||||||
|
│ │ ├── kube-proxy
|
||||||
|
│ │ ├── kube-scheduler
|
||||||
|
│ │ └── pause
|
||||||
|
│ ├── etcd
|
||||||
|
│ ├── kube-apiserver
|
||||||
|
│ ├── kube-controller-manager
|
||||||
|
│ ├── kube-proxy
|
||||||
|
│ ├── kube-scheduler
|
||||||
|
│ └── pause
|
||||||
|
├── nginx
|
||||||
|
├── prometheus
|
||||||
|
├── python
|
||||||
|
├── registry
|
||||||
|
├── ruby
|
||||||
|
└── trivy
|
||||||
|
└── trivy-node-collector
|
||||||
|
</pre>
|
||||||
|
|
||||||
|
Конечный каталог дерева содержит файлы:
|
||||||
|
|
||||||
|
- **`Dockerfile`** - файл для сборки образа;
|
||||||
|
|
||||||
|
- **`image.yml`** - файл описания метаданных для образа.
|
||||||
|
|
||||||
|
Кроме этого конечный каталог может содержать файлы и каталоги, которые помещаются в образ командами `COPY` и `ADD`.
|
||||||
|
|
||||||
|
Все вышележащие до каталога конкретного бранча (`sisyphus`, `p10`, `c10f1`, `c10f2`, ...) описывают группу (возможно пустую), в которую входит образ.
|
||||||
|
|
||||||
|
Имя образа формируется как тропа дерева каталогов.
|
||||||
|
Например:
|
||||||
|
- `sisyphus/apache`
|
||||||
|
- `sisyphus/k8s/kube-apiserver`
|
||||||
|
|
||||||
|
Имя тега берется либо из файла `image.yml` описания образа, либо из файла описания группы `images.yml`.
|
||||||
|
|
||||||
|
## Конечный каталог описания образа
|
||||||
|
|
||||||
|
### Dockerfile
|
||||||
|
|
||||||
|
Предлагается заменить шаблон `Dockerfile.template` заменить на нативный `Dockerfile`.
|
||||||
|
Все параметры, подставляемые функцией `render_dockerfiles` скрипта
|
||||||
|
[/build.py](https://gitea.basealt.ru/alt/image-forge/src/branch/feature-new-layout/build.py#L249)
|
||||||
|
заменяются на аргументы (`ARG`), инициализируемые непосредственно в `Dockerfile`или передаваемые (с заиещением) при сборко образа параметрами `--build-arg="<ARG>=<VALUE>"`.
|
||||||
|
|
||||||
|
За исключением шаблона `{{ install_pakages("<пакет>" ...) }}`
|
||||||
|
|
||||||
|
Предлагается во все базовые дистрибутивы включить `shell-скрипт` `alt_install_pakages`, выполняющий функции аналогичные
|
||||||
|
python-функции [install_pakages](https://gitea.basealt.ru/alt/image-forge/src/branch/feature-new-layout/build.py#L250).
|
||||||
|
|
||||||
|
Шаблон `{{ install_pakages("<пакет>" ...) }}` заменяется в `Dockerfile` оператором:
|
||||||
|
```
|
||||||
|
RUN alt_install_pakages <пакет> ...
|
||||||
|
```
|
||||||
|
|
||||||
|
Пример файла образа `sisyphus/k8s/kube-apiserver`:
|
||||||
|
<pre>
|
||||||
|
ARG BRANCH REGISTRY=gitea.basealt.ru ALT_IMAGE=base/alt:$BRANCH MAINTAINER=alt-cloud ALT_TESTSCRIPT=/bin/true
|
||||||
|
|
||||||
|
FROM $REGISTRY/$ALT_IMAGE:$BRANCH
|
||||||
|
|
||||||
|
MAINTAINER $MAINTAINER
|
||||||
|
|
||||||
|
LABEL org.altlinux.testscript=$ALT_TESTSCRIPT
|
||||||
|
|
||||||
|
RUN alt_install_pakages kubernetes-master
|
||||||
|
|
||||||
|
ENTRYPOINT ["/usr/bin/kube-apiserver"]
|
||||||
|
</pre>
|
||||||
|
|
||||||
|
### Файл image.yml описания метаданных для образа
|
||||||
|
|
||||||
|
В настоящий момент он содержит (жирным шрифтом обязательные элементы):
|
||||||
|
|
||||||
|
* **`image.maintainer`** - E-mail майнтейнера для создания и проверки электронной подписи образа;
|
||||||
|
|
||||||
|
* `image.alias` - список возможных алиасов образа;
|
||||||
|
|
||||||
|
* `image.tag` - тер образа (может при сборке перекрываться тегом, взятым из вышележащего файла `images.yml` описания группы)
|
||||||
|
|
||||||
|
* `image.labels` - список дополнительных метов образа, в частности:
|
||||||
|
|
||||||
|
- `org.altlinux.testscript` - shell код для тестоиования образа при его запуске в режиме `podman ... -it --- <образ>`
|
||||||
|
|
||||||
|
Пример файла образа `sisyphus/k8s/kube-apiserver`:
|
||||||
|
<pre>
|
||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
||||||
|
</pre>
|
||||||
|
|
||||||
|
|
||||||
|
## Каталог группы
|
||||||
|
|
||||||
|
### Файл `images.yml` описания метаданных группы
|
0
branch/sisyphus/base/alt/Dockerfile
Normal file
0
branch/sisyphus/base/alt/Dockerfile
Normal file
0
branch/sisyphus/base/alt/image.yml
Normal file
0
branch/sisyphus/base/alt/image.yml
Normal file
0
branch/sisyphus/base/buildpack-deps-curl/Dockerfile
Normal file
0
branch/sisyphus/base/buildpack-deps-curl/Dockerfile
Normal file
0
branch/sisyphus/base/buildpack-deps-curl/image.yml
Normal file
0
branch/sisyphus/base/buildpack-deps-curl/image.yml
Normal file
0
branch/sisyphus/base/buildpack-deps-scm/Dockerfile
Normal file
0
branch/sisyphus/base/buildpack-deps-scm/Dockerfile
Normal file
0
branch/sisyphus/base/buildpack-deps-scm/image.yml
Normal file
0
branch/sisyphus/base/buildpack-deps-scm/image.yml
Normal file
0
branch/sisyphus/base/devel/Dockerfile
Normal file
0
branch/sisyphus/base/devel/Dockerfile
Normal file
0
branch/sisyphus/base/devel/image.yml
Normal file
0
branch/sisyphus/base/devel/image.yml
Normal file
0
branch/sisyphus/base/distroless-base/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-base/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-base/image.yml
Normal file
0
branch/sisyphus/base/distroless-base/image.yml
Normal file
0
branch/sisyphus/base/distroless-builder/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-builder/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-builder/image.yml
Normal file
0
branch/sisyphus/base/distroless-builder/image.yml
Normal file
0
branch/sisyphus/base/distroless-devel/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-devel/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-devel/image.yml
Normal file
0
branch/sisyphus/base/distroless-devel/image.yml
Normal file
0
branch/sisyphus/base/distroless-gotop/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-gotop/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-gotop/image.yml
Normal file
0
branch/sisyphus/base/distroless-gotop/image.yml
Normal file
0
branch/sisyphus/base/distroless-static/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-static/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-static/image.yml
Normal file
0
branch/sisyphus/base/distroless-static/image.yml
Normal file
0
branch/sisyphus/base/distroless-true/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-true/Dockerfile
Normal file
0
branch/sisyphus/base/distroless-true/image.yml
Normal file
0
branch/sisyphus/base/distroless-true/image.yml
Normal file
0
branch/sisyphus/base/systemd/Dockerfile
Normal file
0
branch/sisyphus/base/systemd/Dockerfile
Normal file
0
branch/sisyphus/base/systemd/image.yml
Normal file
0
branch/sisyphus/base/systemd/image.yml
Normal file
0
branch/sisyphus/base/unit/Dockerfile
Normal file
0
branch/sisyphus/base/unit/Dockerfile
Normal file
0
branch/sisyphus/base/unit/image.yml
Normal file
0
branch/sisyphus/base/unit/image.yml
Normal file
13
branch/sisyphus/flannel/flannel-cni-plugin/Dockerfile
Normal file
13
branch/sisyphus/flannel/flannel-cni-plugin/Dockerfile
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
|
LABEL org.opencontainers.image.title="flannel-cni-plugin"
|
||||||
|
LABEL org.opencontainers.image.description="CNI network plugin that is powered by flannel"
|
||||||
|
LABEL org.opencontainers.image.source="https://github.com/flannel-io/cni-plugin"
|
||||||
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
||||||
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
|
{{ install_pakages("cni-plugin-flannel") }}
|
||||||
|
|
||||||
|
RUN cp /usr/libexec/cni/flannel /flannel
|
28
branch/sisyphus/flannel/flannel/Dockerfile
Normal file
28
branch/sisyphus/flannel/flannel/Dockerfile
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
|
LABEL org.opencontainers.image.title="flannel"
|
||||||
|
LABEL org.opencontainers.image.description="Network fabric for containers"
|
||||||
|
LABEL org.opencontainers.image.source="https://github.com/flannel-io/flannel"
|
||||||
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
||||||
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
|
{{ install_pakages(
|
||||||
|
"iproute2",
|
||||||
|
"net-tools",
|
||||||
|
"ca-certificates",
|
||||||
|
"iptables",
|
||||||
|
"iptables-nft",
|
||||||
|
"strongswan",
|
||||||
|
"wireguard-tools",
|
||||||
|
"flannel",
|
||||||
|
"wget",
|
||||||
|
) }}
|
||||||
|
|
||||||
|
RUN update-ca-trust
|
||||||
|
|
||||||
|
RUN mkdir -p /opt/bin/ && cp /usr/sbin/flanneld /opt/bin/flanneld
|
||||||
|
RUN cp /usr/libexec/flannel/mk-docker-opts.sh /opt/bin/
|
||||||
|
|
||||||
|
ENTRYPOINT ["/opt/bin/flanneld"]
|
7
branch/sisyphus/k8s/coredns/image.yml
Normal file
7
branch/sisyphus/k8s/coredns/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
65
branch/sisyphus/k8s/deckhouse/images.yml
Normal file
65
branch/sisyphus/k8s/deckhouse/images.yml
Normal file
@ -0,0 +1,65 @@
|
|||||||
|
version: 1.0
|
||||||
|
imageSet:
|
||||||
|
|
||||||
|
- version: 1.26.9
|
||||||
|
images:
|
||||||
|
- kube-apiserver:
|
||||||
|
tag: 1.26.9
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-controllermanager:
|
||||||
|
tag: 1.26.9
|
||||||
|
alias: k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-proxy:
|
||||||
|
tag: 1.26.9
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-scheduler:
|
||||||
|
tag: 1.26.9
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- pause:
|
||||||
|
tag: 3.8
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- coredns:
|
||||||
|
tag: v1.10.0
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- etcd:
|
||||||
|
tag: 3.5.9
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- alt/etcd:3.5.9
|
||||||
|
|
||||||
|
- version: 1.26.14
|
||||||
|
images:
|
||||||
|
- kube-apiserver:
|
||||||
|
tag: 1.26.14
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-controllermanager:
|
||||||
|
tag: 1.26.14
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-proxy:
|
||||||
|
tag: 1.26.14
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- kube-scheduler:
|
||||||
|
tag: 1.26.14
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- pause:
|
||||||
|
tag: 3.9
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- coredns:
|
||||||
|
tag: v1.10.0
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- etcd:
|
||||||
|
tag: 3.5.10
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
- alt/etcd:3.5.10
|
41
branch/sisyphus/k8s/images.yml
Normal file
41
branch/sisyphus/k8s/images.yml
Normal file
@ -0,0 +1,41 @@
|
|||||||
|
version: 1.0
|
||||||
|
imageSet:
|
||||||
|
listCmd: ...
|
||||||
|
|
||||||
|
- version: 1.26.9
|
||||||
|
images:
|
||||||
|
- kube-apiserver:
|
||||||
|
tag: 1.26.9
|
||||||
|
- kube-controllermanager:
|
||||||
|
tag: 1.26.9
|
||||||
|
- kube-proxy:
|
||||||
|
tag: 1.26.9
|
||||||
|
- kube-scheduler:
|
||||||
|
tag: 1.26.9
|
||||||
|
- pause:
|
||||||
|
tag: 3.8
|
||||||
|
- coredns:
|
||||||
|
tag: v1.10.0
|
||||||
|
- etcd:
|
||||||
|
tag: 3.5.9
|
||||||
|
alias:
|
||||||
|
- alt/etcd:3.5.9
|
||||||
|
|
||||||
|
- version: 1.26.14
|
||||||
|
images:
|
||||||
|
- kube-apiserver:
|
||||||
|
tag: 1.26.14
|
||||||
|
- kube-controllermanager:
|
||||||
|
tag: 1.26.14
|
||||||
|
- kube-proxy:
|
||||||
|
tag: 1.26.14
|
||||||
|
- kube-scheduler:
|
||||||
|
tag: 1.26.14
|
||||||
|
- pause:
|
||||||
|
tag: 3.9
|
||||||
|
- coredns:
|
||||||
|
tag: v1.10.0
|
||||||
|
- etcd:
|
||||||
|
tag: 3.5.10
|
||||||
|
alias:
|
||||||
|
- alt/etcd:3.5.10
|
7
branch/sisyphus/k8s/kube-apiserver/image.yml
Normal file
7
branch/sisyphus/k8s/kube-apiserver/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
7
branch/sisyphus/k8s/kube-controller-manager/image.yml
Normal file
7
branch/sisyphus/k8s/kube-controller-manager/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
7
branch/sisyphus/k8s/kube-proxy/image.yml
Normal file
7
branch/sisyphus/k8s/kube-proxy/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
7
branch/sisyphus/k8s/kube-scheduler/image.yml
Normal file
7
branch/sisyphus/k8s/kube-scheduler/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
7
branch/sisyphus/k8s/pause/image.yml
Normal file
7
branch/sisyphus/k8s/pause/image.yml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
version: 1.0
|
||||||
|
image:
|
||||||
|
alias:
|
||||||
|
- k8s-${BRANCH}/${IMAGE}:${TAG}
|
||||||
|
labels:
|
||||||
|
org.altlinux.testscript: /bin/true
|
||||||
|
maintainer: stepchenkoas@basealt.ru
|
17
branch/sisyphus/target/apache/Dockerfile
Normal file
17
branch/sisyphus/target/apache/Dockerfile
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
ARG BRANCH REGISTRY=gitea.basealt.ru ALT_IMAGE=base/alt:$BRANCH MAINTAINER=alt-cloud ALT_TESTSCRIPT=/bin/true
|
||||||
|
|
||||||
|
FROM $REGISTRY/$ALT_IMAGE:$BRANCH
|
||||||
|
|
||||||
|
MAINTAINER $MAINTAINER
|
||||||
|
|
||||||
|
LABEL org.opencontainers.image.title="apache2"
|
||||||
|
LABEL org.opencontainers.image.description="The most widely used Web server on the Internet"
|
||||||
|
LABEL org.opencontainers.image.source="http://httpd.apache.org"
|
||||||
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
||||||
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
|
RUN alt_install_pakages apache2
|
||||||
|
|
||||||
|
EXPOSE 80
|
||||||
|
|
||||||
|
CMD ["/usr/sbin/httpd2", "-D", "NO_DETACH", "-k", "start"]
|
0
branch/sisyphus/target/etcd/Dockerfile
Normal file
0
branch/sisyphus/target/etcd/Dockerfile
Normal file
0
branch/sisyphus/target/etcd/image.yml
Normal file
0
branch/sisyphus/target/etcd/image.yml
Normal file
0
branch/sisyphus/target/gitea/Dockerfile
Normal file
0
branch/sisyphus/target/gitea/Dockerfile
Normal file
0
branch/sisyphus/target/gitea/image.yml
Normal file
0
branch/sisyphus/target/gitea/image.yml
Normal file
0
branch/sisyphus/target/nginx/Dockerfile
Normal file
0
branch/sisyphus/target/nginx/Dockerfile
Normal file
0
branch/sisyphus/target/nginx/image.yml
Normal file
0
branch/sisyphus/target/nginx/image.yml
Normal file
0
branch/sisyphus/target/prometheus/Dockerfile
Normal file
0
branch/sisyphus/target/prometheus/Dockerfile
Normal file
0
branch/sisyphus/target/prometheus/image.yml
Normal file
0
branch/sisyphus/target/prometheus/image.yml
Normal file
0
branch/sisyphus/target/python/Dockerfile
Normal file
0
branch/sisyphus/target/python/Dockerfile
Normal file
0
branch/sisyphus/target/python/image.yml
Normal file
0
branch/sisyphus/target/python/image.yml
Normal file
0
branch/sisyphus/target/registry/Dockerfile
Normal file
0
branch/sisyphus/target/registry/Dockerfile
Normal file
0
branch/sisyphus/target/registry/image.yml
Normal file
0
branch/sisyphus/target/registry/image.yml
Normal file
0
branch/sisyphus/target/ruby/Dockerfile
Normal file
0
branch/sisyphus/target/ruby/Dockerfile
Normal file
0
branch/sisyphus/target/ruby/image.yml
Normal file
0
branch/sisyphus/target/ruby/image.yml
Normal file
207
build.py
207
build.py
@ -6,62 +6,25 @@ import json
|
|||||||
import re
|
import re
|
||||||
import subprocess
|
import subprocess
|
||||||
import textwrap
|
import textwrap
|
||||||
from datetime import datetime
|
|
||||||
from dataclasses import dataclass
|
|
||||||
from graphlib import TopologicalSorter
|
from graphlib import TopologicalSorter
|
||||||
from pathlib import Path
|
from pathlib import Path
|
||||||
|
|
||||||
import requests
|
|
||||||
import tomli
|
import tomli
|
||||||
import yaml
|
|
||||||
from jinja2 import Template
|
from jinja2 import Template
|
||||||
|
|
||||||
|
|
||||||
ORG_DIR = Path("org")
|
ORG_DIR = Path("org")
|
||||||
|
|
||||||
PKG_VERSIONS: dict | None = None
|
|
||||||
|
|
||||||
|
|
||||||
@dataclass
|
|
||||||
class Image:
|
class Image:
|
||||||
canonical_name: str
|
def __init__(self, canonical_name):
|
||||||
is_versioned: bool | None
|
|
||||||
verion_template: str | None
|
|
||||||
source_packages: list[str] | None
|
|
||||||
|
|
||||||
def __init__(self, canonical_name: str):
|
|
||||||
self.canonical_name = canonical_name
|
self.canonical_name = canonical_name
|
||||||
self.path = ORG_DIR / canonical_name
|
self.path = ORG_DIR / canonical_name
|
||||||
self.base_name = re.sub("^[^/]+/", "", canonical_name)
|
self.base_name = re.sub("^[^/]+/", "", canonical_name)
|
||||||
|
|
||||||
info_file = self.path / "info.yaml"
|
def __str__(self):
|
||||||
if not info_file.exists():
|
return (f'Image(canonical_name="{self.canonical_name}", '
|
||||||
self.is_versioned = None
|
f'path="{self.path}", base_name="{self.base_name}")')
|
||||||
self.source_packages = None
|
|
||||||
return
|
|
||||||
|
|
||||||
info: dict = yaml.safe_load(info_file.read_text())
|
|
||||||
|
|
||||||
if "is_versioned" not in info:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"info.yaml for {self.canonical_name} doesn't contain 'is_versioned' key"
|
|
||||||
)
|
|
||||||
|
|
||||||
if "source_packages" not in info:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"info.yaml for {self.canonical_name} doesn't contain 'source_packages' key"
|
|
||||||
)
|
|
||||||
|
|
||||||
self.is_versioned = info["is_versioned"]
|
|
||||||
self.source_packages = info["source_packages"]
|
|
||||||
|
|
||||||
if self.is_versioned and not self.source_packages:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"source_packages for {self.canonical_name} doesn't contain any values"
|
|
||||||
)
|
|
||||||
|
|
||||||
self.version_template = None
|
|
||||||
if "version_template" in info:
|
|
||||||
self.version_template = info["version_template"]
|
|
||||||
|
|
||||||
|
|
||||||
class Tasks:
|
class Tasks:
|
||||||
@ -86,95 +49,22 @@ class Tasks:
|
|||||||
]
|
]
|
||||||
|
|
||||||
|
|
||||||
def api_get_source_package_version(branch: str, package_name: str) -> str:
|
|
||||||
api_url = "https://rdb.altlinux.org/api/site/package_versions_from_tasks"
|
|
||||||
params = {"branch": branch, "name": package_name}
|
|
||||||
response = requests.get(api_url, params)
|
|
||||||
if response.status_code != 200:
|
|
||||||
print(response)
|
|
||||||
api_url = "https://rdb.altlinux.org/api/site/package_versions"
|
|
||||||
params = {"arch": "x86_64", "package_type": "source", "name": package_name}
|
|
||||||
response = requests.get(api_url, params)
|
|
||||||
if response.status_code != 200:
|
|
||||||
print(response)
|
|
||||||
raise RuntimeError(
|
|
||||||
f"failed to retrieve source package version: source package {package_name!r}, branch {branch!r} "
|
|
||||||
)
|
|
||||||
result = response.json()
|
|
||||||
for v in result["versions"]:
|
|
||||||
if v["branch"] == branch:
|
|
||||||
return v["version"]
|
|
||||||
|
|
||||||
raise RuntimeError(
|
|
||||||
f"failed to retrieve source package version: source package {package_name!r}, branch {branch!r} "
|
|
||||||
)
|
|
||||||
|
|
||||||
result = response.json()
|
|
||||||
|
|
||||||
return result["versions"][0]["version"]
|
|
||||||
|
|
||||||
|
|
||||||
class Tags:
|
class Tags:
|
||||||
def __init__(self, tags_file: str | None, latest: str):
|
def __init__(self, tags_file, latest):
|
||||||
if tags_file is None:
|
if tags_file is None:
|
||||||
self._tags = None
|
self._tags = None
|
||||||
else:
|
else:
|
||||||
self._tags = tomli.loads(Path(tags_file).read_text())
|
tags_file = Path(tags_file)
|
||||||
|
self._tags = tomli.loads(tags_file.read_text())
|
||||||
self._latest = latest
|
self._latest = latest
|
||||||
|
|
||||||
def tags(self, branch: str, image: Image):
|
def tags(self, branch, image: Image):
|
||||||
if self._tags is None:
|
if self._tags is None:
|
||||||
if image.is_versioned is None:
|
tags = [branch]
|
||||||
tags = [branch]
|
|
||||||
if branch == self._latest:
|
|
||||||
tags.append("latest")
|
|
||||||
|
|
||||||
elif image.is_versioned and image.source_packages:
|
|
||||||
package_name = image.source_packages[0]
|
|
||||||
|
|
||||||
if re.search("{%.*%}", package_name):
|
|
||||||
package_name = Template(package_name).render(branch=branch).strip()
|
|
||||||
print(f"{package_name=}")
|
|
||||||
|
|
||||||
if re.search("{{.*}}", package_name):
|
|
||||||
if PKG_VERSIONS is None:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"--package-versions option is not specified, required for {image.canonical_name!r}"
|
|
||||||
)
|
|
||||||
|
|
||||||
if image.canonical_name not in PKG_VERSIONS:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"--package-versions option does not contain version for image {image.canonical_name!r}"
|
|
||||||
)
|
|
||||||
|
|
||||||
if not PKG_VERSIONS[image.canonical_name]:
|
|
||||||
raise RuntimeError(
|
|
||||||
f"invalid version for image {image.canonical_name!r}: {PKG_VERSIONS[image.canonical_name]!r}"
|
|
||||||
)
|
|
||||||
|
|
||||||
package_name = Template(package_name).render(
|
|
||||||
version=PKG_VERSIONS[image.canonical_name]
|
|
||||||
)
|
|
||||||
version = api_get_source_package_version(branch, package_name)
|
|
||||||
|
|
||||||
if image.version_template is not None:
|
|
||||||
version = (
|
|
||||||
Template(image.version_template).render(version=version).strip()
|
|
||||||
)
|
|
||||||
|
|
||||||
tags = [version]
|
|
||||||
tags.append("latest")
|
|
||||||
else:
|
|
||||||
version = datetime.now().strftime('%Y%m%d')
|
|
||||||
if image.version_template is not None:
|
|
||||||
version = (
|
|
||||||
Template(image.version_template).render(version=version).strip()
|
|
||||||
)
|
|
||||||
tags = [version]
|
|
||||||
tags.append("latest")
|
|
||||||
else:
|
else:
|
||||||
tags = self._tags[image.canonical_name][branch].copy()
|
tags = self._tags[image.canonical_name][branch].copy()
|
||||||
|
if branch == self._latest:
|
||||||
|
tags.append("latest")
|
||||||
return tags
|
return tags
|
||||||
|
|
||||||
|
|
||||||
@ -217,10 +107,6 @@ class Distroless:
|
|||||||
elif value := dd.get("workingdir"):
|
elif value := dd.get("workingdir"):
|
||||||
self.config_options.append(f"--workingdir={value}")
|
self.config_options.append(f"--workingdir={value}")
|
||||||
|
|
||||||
if labels := dd.get("label"):
|
|
||||||
for k, v in labels.items():
|
|
||||||
self.config_options.append(f"--label={k}={v}")
|
|
||||||
|
|
||||||
def render_arch_branch(self, arch, branch):
|
def render_arch_branch(self, arch, branch):
|
||||||
def if_arches(arches, value, default=""):
|
def if_arches(arches, value, default=""):
|
||||||
if arch in arches or not arches:
|
if arch in arches or not arches:
|
||||||
@ -267,10 +153,9 @@ class DockerBuilder:
|
|||||||
def make_image_re(self):
|
def make_image_re(self):
|
||||||
registry = r"(?P<registry>[\w.:]+)"
|
registry = r"(?P<registry>[\w.:]+)"
|
||||||
organization = r"(?P<organization>\w+)"
|
organization = r"(?P<organization>\w+)"
|
||||||
branch = r"(?P<branch>\w+)"
|
|
||||||
name = r"(?P<name>[-.\w]+)"
|
name = r"(?P<name>[-.\w]+)"
|
||||||
tag = r"(?P<tag>[\w.]+)"
|
tag = r"(?P<tag>[\w.]+)"
|
||||||
return rf"(:?{registry}/)?(:?{organization}/)?(:?{branch}/)?{name}(:?:{tag})?"
|
return rf"(:?{registry}/)?(:?{organization}/)?{name}(:?:{tag})?"
|
||||||
|
|
||||||
def make_dockerfile_from_re(self):
|
def make_dockerfile_from_re(self):
|
||||||
image_re = self.make_image_re()
|
image_re = self.make_image_re()
|
||||||
@ -298,7 +183,7 @@ class DockerBuilder:
|
|||||||
if overwrite_organization:
|
if overwrite_organization:
|
||||||
self.overwrite_organization = overwrite_organization
|
self.overwrite_organization = overwrite_organization
|
||||||
else:
|
else:
|
||||||
self.overwrite_organization = branch
|
self.overwrite_organization = organization
|
||||||
self.latest = latest
|
self.latest = latest
|
||||||
self.dry_run = dry_run
|
self.dry_run = dry_run
|
||||||
self.images_info = images_info
|
self.images_info = images_info
|
||||||
@ -340,19 +225,19 @@ class DockerBuilder:
|
|||||||
self,
|
self,
|
||||||
template: str,
|
template: str,
|
||||||
organization: str,
|
organization: str,
|
||||||
install_packages=None,
|
install_pakages=None,
|
||||||
**kwargs,
|
**kwargs,
|
||||||
) -> str:
|
) -> str:
|
||||||
if self.registry:
|
if self.registry:
|
||||||
registry = self.registry.rstrip("/") + "/"
|
registry = self.registry.rstrip("/") + "/"
|
||||||
alt_image = "alt"
|
alt_image = "alt/alt"
|
||||||
else:
|
else:
|
||||||
registry = ""
|
registry = ""
|
||||||
alt_image = "alt"
|
alt_image = "alt"
|
||||||
rendered = Template(template).render(
|
rendered = Template(template).render(
|
||||||
alt_image=alt_image,
|
alt_image=alt_image,
|
||||||
branch=self.branch,
|
branch=self.branch,
|
||||||
install_packages=install_packages,
|
install_pakages=install_pakages,
|
||||||
organization=organization,
|
organization=organization,
|
||||||
registry=registry,
|
registry=registry,
|
||||||
**kwargs,
|
**kwargs,
|
||||||
@ -362,7 +247,7 @@ class DockerBuilder:
|
|||||||
|
|
||||||
@forall_images(consume_result=True)
|
@forall_images(consume_result=True)
|
||||||
def render_dockerfiles(self, **kwargs):
|
def render_dockerfiles(self, **kwargs):
|
||||||
def install_packages(*names):
|
def install_pakages(*names):
|
||||||
tasks = self.tasks.get(self.branch, kwargs["image"])
|
tasks = self.tasks.get(self.branch, kwargs["image"])
|
||||||
linux32 = '$([ "$(rpm --eval %_host_cpu)" = i586 ] && echo linux32)'
|
linux32 = '$([ "$(rpm --eval %_host_cpu)" = i586 ] && echo linux32)'
|
||||||
if tasks:
|
if tasks:
|
||||||
@ -388,7 +273,7 @@ class DockerBuilder:
|
|||||||
rendered = self.render_template(
|
rendered = self.render_template(
|
||||||
dockerfile_template.read_text(),
|
dockerfile_template.read_text(),
|
||||||
self.overwrite_organization,
|
self.overwrite_organization,
|
||||||
install_packages,
|
install_pakages,
|
||||||
)
|
)
|
||||||
kwargs["dockerfile"].write_text(rendered + "\n")
|
kwargs["dockerfile"].write_text(rendered + "\n")
|
||||||
|
|
||||||
@ -419,7 +304,7 @@ class DockerBuilder:
|
|||||||
from_image = match.groupdict()
|
from_image = match.groupdict()
|
||||||
if from_image["name"] != "scratch":
|
if from_image["name"] != "scratch":
|
||||||
requires.add(
|
requires.add(
|
||||||
f"{self.organization}/{from_image['name']}"
|
f"{from_image['organization']}/{from_image['name']}"
|
||||||
)
|
)
|
||||||
elif distrolessfile.exists():
|
elif distrolessfile.exists():
|
||||||
requires.add("alt/distroless-builder")
|
requires.add("alt/distroless-builder")
|
||||||
@ -428,7 +313,7 @@ class DockerBuilder:
|
|||||||
if match := re.match(self.image_re, from_):
|
if match := re.match(self.image_re, from_):
|
||||||
from_image = match.groupdict()
|
from_image = match.groupdict()
|
||||||
if from_image["name"] != "scratch":
|
if from_image["name"] != "scratch":
|
||||||
requires.add(f"{self.organization}/{from_image['name']}")
|
requires.add(f"{from_image['organization']}/{from_image['name']}")
|
||||||
|
|
||||||
return (canonical_name, requires)
|
return (canonical_name, requires)
|
||||||
|
|
||||||
@ -460,7 +345,7 @@ class DockerBuilder:
|
|||||||
def distroless_build(self, image: Image, arches):
|
def distroless_build(self, image: Image, arches):
|
||||||
def distroless_build_arch(arch, manifest):
|
def distroless_build_arch(arch, manifest):
|
||||||
distroless_builder = self.render_full_tag(
|
distroless_builder = self.render_full_tag(
|
||||||
Image("alt/distroless-builder"), "latest"
|
Image("alt/distroless-builder"), self.branch
|
||||||
)
|
)
|
||||||
distroless = self.distrolesses[image.canonical_name]
|
distroless = self.distrolesses[image.canonical_name]
|
||||||
distroless.render_arch_branch(arch, self.branch)
|
distroless.render_arch_branch(arch, self.branch)
|
||||||
@ -695,12 +580,6 @@ class DockerBuilder:
|
|||||||
f"--platform={platforms}",
|
f"--platform={platforms}",
|
||||||
".",
|
".",
|
||||||
]
|
]
|
||||||
|
|
||||||
if PKG_VERSIONS is not None and image.canonical_name in PKG_VERSIONS:
|
|
||||||
build_cmd.insert(
|
|
||||||
-1, f"--build-arg=PKG_VERSION={PKG_VERSIONS[image.canonical_name]}"
|
|
||||||
)
|
|
||||||
|
|
||||||
self.run(build_cmd, cwd=image.path)
|
self.run(build_cmd, cwd=image.path)
|
||||||
|
|
||||||
for tag in tags[1:]:
|
for tag in tags[1:]:
|
||||||
@ -759,8 +638,8 @@ class ImagesInfo:
|
|||||||
|
|
||||||
def parse_args():
|
def parse_args():
|
||||||
stages = ["build", "remove_dockerfiles", "render_dockerfiles", "push"]
|
stages = ["build", "remove_dockerfiles", "render_dockerfiles", "push"]
|
||||||
arches = ["amd64", "386", "arm64", "loong64", "riscv64"]
|
arches = ["amd64", "386", "arm64", "arm", "ppc64le"]
|
||||||
branches = ["p11", "p10", "sisyphus", "c10f1", "c10f2"]
|
branches = ["p9", "p10", "sisyphus", "c10f1", "c10f2"]
|
||||||
organizations = list(ORG_DIR.iterdir())
|
organizations = list(ORG_DIR.iterdir())
|
||||||
images = [f"{o.name}/{i.name}" for o in organizations for i in o.iterdir()]
|
images = [f"{o.name}/{i.name}" for o in organizations for i in o.iterdir()]
|
||||||
organizations = [o.name for o in organizations]
|
organizations = [o.name for o in organizations]
|
||||||
@ -775,8 +654,7 @@ def parse_args():
|
|||||||
nargs="+",
|
nargs="+",
|
||||||
default=images,
|
default=images,
|
||||||
choices=images,
|
choices=images,
|
||||||
metavar="IMAGE_NAME",
|
help="list of branches",
|
||||||
help="list of images to build",
|
|
||||||
)
|
)
|
||||||
images_group.add_argument(
|
images_group.add_argument(
|
||||||
"-o",
|
"-o",
|
||||||
@ -786,14 +664,6 @@ def parse_args():
|
|||||||
choices=organizations,
|
choices=organizations,
|
||||||
help="build all images from these organizations",
|
help="build all images from these organizations",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
|
||||||
"--skip-images",
|
|
||||||
nargs="+",
|
|
||||||
default=[],
|
|
||||||
choices=images,
|
|
||||||
metavar="IMAGE_NAME",
|
|
||||||
help="list of images to skip",
|
|
||||||
)
|
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"-r",
|
"-r",
|
||||||
"--registry",
|
"--registry",
|
||||||
@ -826,20 +696,27 @@ def parse_args():
|
|||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"--sign",
|
"--sign",
|
||||||
)
|
)
|
||||||
|
parser.add_argument(
|
||||||
|
"--skip-images",
|
||||||
|
nargs="+",
|
||||||
|
default=[],
|
||||||
|
choices=images,
|
||||||
|
help="list of skipping images",
|
||||||
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"-a",
|
"-a",
|
||||||
"--arches",
|
"--arches",
|
||||||
nargs="+",
|
nargs="+",
|
||||||
default=arches,
|
default=arches,
|
||||||
choices=arches,
|
choices=arches,
|
||||||
help="build images for these architectures",
|
help="list of arches",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"--skip-arches",
|
"--skip-arches",
|
||||||
nargs="+",
|
nargs="+",
|
||||||
default=[],
|
default=[],
|
||||||
choices=arches,
|
choices=arches,
|
||||||
help="list of architectures to skip",
|
help="list of skipping arches",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"-b",
|
"-b",
|
||||||
@ -847,33 +724,28 @@ def parse_args():
|
|||||||
nargs="+",
|
nargs="+",
|
||||||
default=branches,
|
default=branches,
|
||||||
choices=branches,
|
choices=branches,
|
||||||
help="build images for these branches",
|
help="list of branches",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"--skip-branches",
|
"--skip-branches",
|
||||||
nargs="+",
|
nargs="+",
|
||||||
default=[],
|
default=[],
|
||||||
choices=branches,
|
choices=branches,
|
||||||
help="list of branches to skip",
|
help="list of skipping branches",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"--stages",
|
"--stages",
|
||||||
nargs="+",
|
nargs="+",
|
||||||
default=stages,
|
default=stages,
|
||||||
choices=stages,
|
choices=stages,
|
||||||
help="list of stages to go through",
|
help="list of stages",
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
"--skip-stages",
|
"--skip-stages",
|
||||||
nargs="+",
|
nargs="+",
|
||||||
default=[],
|
default=[],
|
||||||
choices=stages,
|
choices=stages,
|
||||||
help="list of stages to skip",
|
help="list of skipping stages",
|
||||||
)
|
|
||||||
parser.add_argument(
|
|
||||||
"--package-versions",
|
|
||||||
type=json.loads,
|
|
||||||
help="json string where key is image name, value is the package version",
|
|
||||||
)
|
)
|
||||||
args = parser.parse_args()
|
args = parser.parse_args()
|
||||||
|
|
||||||
@ -886,10 +758,7 @@ def parse_args():
|
|||||||
|
|
||||||
|
|
||||||
def main():
|
def main():
|
||||||
global PKG_VERSIONS
|
|
||||||
|
|
||||||
args = parse_args()
|
args = parse_args()
|
||||||
PKG_VERSIONS = args.package_versions
|
|
||||||
arches = args.arches
|
arches = args.arches
|
||||||
images_info = ImagesInfo()
|
images_info = ImagesInfo()
|
||||||
tags = Tags(args.tags, args.latest)
|
tags = Tags(args.tags, args.latest)
|
||||||
|
@ -1,11 +1,65 @@
|
|||||||
["alt/buildpack-deps"]
|
["alt/buildpack-deps"]
|
||||||
skip-branches = [ "p9" ]
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
["alt/distroless-toybox"]
|
["alt/distroless-base"]
|
||||||
skip-branches = [ "p10" ]
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
["alt/openjdk21"]
|
["alt/distroless-builder"]
|
||||||
skip-arches = [ "386" ]
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
["alt/ansible"]
|
["alt/distroless-devel"]
|
||||||
skip-branches = [ "c10f2", "c10f1", "p10" ]
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/distroless-gotop"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/distroless-static"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/distroless-true"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/gitea"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/node"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/unit"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/prometheus"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["alt/registry"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/cert-manager-cainjector"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/cert-manager-controller"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/cert-manager-webhook"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/coredns"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/etcd"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/kube-apiserver"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/kube-controller-manager"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/kube-proxy"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/kube-scheduler"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
|
||||||
|
["k8s/pause"]
|
||||||
|
skip-branches = [ "p9" ]
|
||||||
|
@ -1,17 +0,0 @@
|
|||||||
FROM {{ registry }}{{ branch }}/node:latest
|
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="ansible"
|
|
||||||
LABEL org.opencontainers.image.description="A radically simple IT automation system"
|
|
||||||
LABEL org.opencontainers.image.source="http://www.ansible.com"
|
|
||||||
LABEL org.opencontainers.image.licenses="GPL-3.0"
|
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
|
||||||
|
|
||||||
{{ install_packages(
|
|
||||||
"ansible-vim",
|
|
||||||
"ansible-core",
|
|
||||||
"ansible-lint"
|
|
||||||
) }}
|
|
||||||
|
|
||||||
WORKDIR /etc/ansible/playbooks
|
|
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: true
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- ansible-core
|
|
||||||
- ansible-vim
|
|
||||||
- ansible-lint
|
|
||||||
...
|
|
@ -1 +0,0 @@
|
|||||||
ansible --version
|
|
@ -1,4 +1,4 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
@ -8,7 +8,7 @@ LABEL org.opencontainers.image.source="http://httpd.apache.org"
|
|||||||
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages("apache2") }}
|
{{ install_pakages("apache2") }}
|
||||||
|
|
||||||
EXPOSE 80
|
EXPOSE 80
|
||||||
|
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: true
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- apache2
|
|
||||||
...
|
|
@ -1,12 +1,7 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="base"
|
{{ install_pakages("glibc-gconv-modules", "glibc-locales", "tzdata") }}
|
||||||
LABEL org.opencontainers.image.description="Base image with localization and timezone packages"
|
|
||||||
LABEL org.opencontainers.image.licenses="GPLv2"
|
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
|
||||||
|
|
||||||
{{ install_packages("glibc-gconv-modules", "glibc-locales", "tzdata") }}
|
|
||||||
|
|
||||||
CMD ["bash"]
|
CMD ["bash"]
|
||||||
|
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- glibc
|
|
||||||
- tzdata
|
|
||||||
...
|
|
@ -1,13 +1,12 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="buildpack-deps-curl"
|
LABEL org.opencontainers.image.title="buildpack-deps-curl"
|
||||||
LABEL org.opencontainers.image.description = "Transfer data environment"
|
|
||||||
LABEL org.opencontainers.image.licenses="GPLv2"
|
LABEL org.opencontainers.image.licenses="GPLv2"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages(
|
{{ install_pakages(
|
||||||
"ca-certificates",
|
"ca-certificates",
|
||||||
"curl",
|
"curl",
|
||||||
"gnupg",
|
"gnupg",
|
||||||
|
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- ca-certificates
|
|
||||||
- curl
|
|
||||||
- gnupg
|
|
||||||
- wget
|
|
||||||
...
|
|
@ -1,13 +1,12 @@
|
|||||||
FROM {{ registry }}{{ branch }}/buildpack-deps-curl:latest
|
FROM {{ registry }}{{ organization }}/buildpack-deps-curl:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="buildpack-deps-scm"
|
LABEL org.opencontainers.image.title="buildpack-deps-scm"
|
||||||
LABEL org.opencontainers.image.licenses="GPLv2"
|
LABEL org.opencontainers.image.licenses="GPLv2"
|
||||||
LABEL org.opencontainers.image.description = "Software configuration management environment"
|
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages(
|
{{ install_pakages(
|
||||||
"git",
|
"git",
|
||||||
"mercurial",
|
"mercurial",
|
||||||
"openssh-clients",
|
"openssh-clients",
|
||||||
|
@ -1,10 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- git
|
|
||||||
- mercurial
|
|
||||||
- openssh
|
|
||||||
- procps
|
|
||||||
- subversion
|
|
||||||
...
|
|
@ -1,13 +1,12 @@
|
|||||||
FROM {{ registry }}{{ branch }}/buildpack-deps-scm:latest
|
FROM {{ registry }}{{ organization }}/buildpack-deps-scm:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="buildpack-deps"
|
LABEL org.opencontainers.image.title="buildpack-deps"
|
||||||
LABEL org.opencontainers.image.description = "Projects building environment"
|
|
||||||
LABEL org.opencontainers.image.licenses="GPLv2"
|
LABEL org.opencontainers.image.licenses="GPLv2"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages(
|
{{ install_pakages(
|
||||||
"ImageMagick",
|
"ImageMagick",
|
||||||
"autoconf",
|
"autoconf",
|
||||||
"automake",
|
"automake",
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- gcc-defaults
|
|
||||||
...
|
|
@ -1,4 +1,4 @@
|
|||||||
FROM {{ registry }}{{ branch }}/base:latest
|
FROM {{ registry }}{{ organization }}/base:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
@ -8,27 +8,27 @@ LABEL org.opencontainers.image.licenses="GPLv2"
|
|||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
# install editor
|
# install editor
|
||||||
{{ install_packages("vim-console") }}
|
{{ install_pakages("vim-console") }}
|
||||||
|
|
||||||
# install debugging tools
|
# install debugging tools
|
||||||
{{ install_packages("strace", "gdb") }}
|
{{ install_pakages("strace", "gdb") }}
|
||||||
|
|
||||||
# install document viewers
|
# install document viewers
|
||||||
{{ install_packages("man") }}
|
{{ install_pakages("man") }}
|
||||||
|
|
||||||
# install version control system
|
# install version control system
|
||||||
{{ install_packages("git-core", "perl-Git") }}
|
{{ install_pakages("git-core", "perl-Git") }}
|
||||||
|
|
||||||
# install network utils
|
# install network utils
|
||||||
{{ install_packages("iproute2", "iputils", "wget", "curl") }}
|
{{ install_pakages("iproute2", "iputils", "wget", "curl") }}
|
||||||
|
|
||||||
# install file utils
|
# install file utils
|
||||||
{{ install_packages("lsof", "ripgrep") }}
|
{{ install_pakages("lsof", "ripgrep") }}
|
||||||
|
|
||||||
# install shell and completions
|
# install shell and completions
|
||||||
{{ install_packages("zsh", "zsh-completions") }}
|
{{ install_pakages("zsh", "zsh-completions") }}
|
||||||
|
|
||||||
# install compilation utils
|
# install compilation utils
|
||||||
{{ install_packages("make", "gcc", "gcc-c++") }}
|
{{ install_pakages("make", "gcc", "gcc-c++") }}
|
||||||
|
|
||||||
CMD ["zsh"]
|
CMD ["zsh"]
|
||||||
|
@ -1,17 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- gcc-defaults
|
|
||||||
- vim
|
|
||||||
- gdb
|
|
||||||
- git
|
|
||||||
- iproute2
|
|
||||||
- iputils
|
|
||||||
- wget
|
|
||||||
- curl
|
|
||||||
- lsof
|
|
||||||
- ripgrep
|
|
||||||
- zsh
|
|
||||||
- make
|
|
||||||
...
|
|
@ -1,11 +1,11 @@
|
|||||||
from = "{{ registry }}{{ branch }}/distroless-static:latest"
|
from = "{{ registry }}{{ organization }}/distroless-static:{{ branch }}"
|
||||||
builder-install-packages = [
|
builder-install-packages = [
|
||||||
"glibc-core",
|
"glibc-core",
|
||||||
'{{if_branches(["p10"], "glibc-nss")}}',
|
'{{if_branches(["p10"], "glibc-nss")}}',
|
||||||
"glibc-timezones",
|
"glibc-timezones",
|
||||||
"libselinux",
|
"libselinux",
|
||||||
'{{if_branches(["p10"], "libssl1.1")}}',
|
'{{if_branches(["p9", "p10"], "libssl1.1")}}',
|
||||||
'{{if_branches(["p11"], "libssl3")}}',
|
'{{if_branches(["sisyphus"], "libssl1.1")}}',
|
||||||
'{{if_branches(["sisyphus"], "libssl3")}}',
|
'{{if_branches(["sisyphus"], "libssl3")}}',
|
||||||
"tzdata",
|
"tzdata",
|
||||||
"zlib",
|
"zlib",
|
||||||
@ -19,4 +19,3 @@ packages = [
|
|||||||
"zlib",
|
"zlib",
|
||||||
]
|
]
|
||||||
timezone = "Europe/Moscow"
|
timezone = "Europe/Moscow"
|
||||||
label = {"org.opencontainers.image.title" = "distroless-base", "org.opencontainers.image.description" = "Base image for running dynamically linked programs", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
||||||
|
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- glibc
|
|
||||||
- tzdata
|
|
||||||
- zlib
|
|
||||||
- libselinux
|
|
||||||
...
|
|
@ -1,15 +1,15 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
LABEL org.opencontainers.image.title="distroless-builder"
|
LABEL org.opencontainers.image.title="distroless-builder"
|
||||||
LABEL org.opencontainers.image.description="This image is used to build tarballs for distroless images"
|
LABEL org.opencontainers.image.description="This images is using to build tarball for distroless images"
|
||||||
LABEL org.opencontainers.image.licenses="GPLv2"
|
LABEL org.opencontainers.image.licenses="GPLv2"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
RUN echo %_excludedocs 1 >> /etc/rpm/macros
|
RUN echo %_excludedocs 1 >> /etc/rpm/macros
|
||||||
RUN rpm -qalds | awk '/^normal/{print $2}' | xargs rm -rf
|
RUN rpm -qalds | awk '/^normal/{print $2}' | xargs rm -rf
|
||||||
{{ install_packages("python3", "glibc-utils", "apt-repo") }}
|
{{ install_pakages("python3", "glibc-utils", "apt-repo") }}
|
||||||
WORKDIR /usr/src/distroless
|
WORKDIR /usr/src/distroless
|
||||||
RUN mkdir file-lists
|
RUN mkdir file-lists
|
||||||
RUN useradd -m nonroot
|
RUN useradd -m nonroot
|
||||||
|
@ -1,3 +1,3 @@
|
|||||||
ALT dockerfile for distroless-builder image.
|
ALT dockerfile for distroless-builder image.
|
||||||
|
|
||||||
This image is used to build tarballs for distroless images.
|
This images is using to build tarball for distroless images.
|
||||||
|
@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- glibc
|
|
||||||
- apt-repo
|
|
||||||
...
|
|
@ -1,4 +1,4 @@
|
|||||||
from = "{{ registry }}{{ branch }}/distroless-base:latest"
|
from = "{{ registry }}{{ organization }}/distroless-base:{{ branch }}"
|
||||||
builder-install-packages = [
|
builder-install-packages = [
|
||||||
"coreutils",
|
"coreutils",
|
||||||
"findutils",
|
"findutils",
|
||||||
@ -37,4 +37,3 @@ packages = [
|
|||||||
"vim-console",
|
"vim-console",
|
||||||
]
|
]
|
||||||
cmd = ["/bin/bash"]
|
cmd = ["/bin/bash"]
|
||||||
label = {"org.opencontainers.image.title" = "distroless-devel", "org.opencontainers.image.description" = "Base image for creating and debugging distroless images", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
||||||
|
@ -1,10 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- coreutils
|
|
||||||
- findutils
|
|
||||||
- glibc
|
|
||||||
- iproute2
|
|
||||||
- vim
|
|
||||||
...
|
|
@ -1,4 +1,3 @@
|
|||||||
from = "{{ registry }}{{ branch }}/distroless-base:latest"
|
from = "{{ registry }}{{ organization }}/distroless-base:{{ branch }}"
|
||||||
full-files = ["/usr/bin/gotop"]
|
full-files = ["/usr/bin/gotop"]
|
||||||
entrypoint = ["/usr/bin/gotop"]
|
entrypoint = ["/usr/bin/gotop"]
|
||||||
label = {"org.opencontainers.image.title" = "distroless-gotop", "org.opencontainers.image.description" = "Gotop image", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- gotop
|
|
||||||
...
|
|
@ -2,4 +2,3 @@ from = "scratch"
|
|||||||
file-lists = ["static.list"]
|
file-lists = ["static.list"]
|
||||||
user = "nonroot"
|
user = "nonroot"
|
||||||
workdir = "/home/nonroot"
|
workdir = "/home/nonroot"
|
||||||
label = {"org.opencontainers.image.title" = "distroless-static", "org.opencontainers.image.description" = "Base image for running statically linked programs", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- distroless-static
|
|
||||||
...
|
|
@ -1,11 +0,0 @@
|
|||||||
ALT distroless-toybox image
|
|
||||||
===========================
|
|
||||||
|
|
||||||
This is distroless image with toybox binary. It can be used for debugging
|
|
||||||
containers as toybox provides a lot of utils.
|
|
||||||
|
|
||||||
To launch a shell in the container:
|
|
||||||
`docker run --rm -it registry.altlinux.org/alt/distroless-toybox`
|
|
||||||
|
|
||||||
To get system inforamtion:
|
|
||||||
`docker run --rm -it registry.altlinux.org/alt/distroless-toybox uname -a`
|
|
@ -1,7 +0,0 @@
|
|||||||
from = "{{ registry }}{{ branch }}/distroless-static:latest"
|
|
||||||
|
|
||||||
builder-install-packages = ["toybox"]
|
|
||||||
files = ["/bin/toybox"]
|
|
||||||
entrypoint = ["/bin/toybox"]
|
|
||||||
cmd = ["sh"]
|
|
||||||
label = {"org.opencontainers.image.title" = "distroless-toybox", "org.opencontainers.image.description" = "Base image with toybox environment", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- toybox
|
|
||||||
...
|
|
@ -1,4 +1,3 @@
|
|||||||
from = "{{ registry }}{{ branch }}/distroless-static:latest"
|
from = "{{ registry }}{{ organization }}/distroless-static:{{ branch }}"
|
||||||
files = ["/bin/true"]
|
files = ["/bin/true"]
|
||||||
cmd = ["/bin/true"]
|
cmd = ["/bin/true"]
|
||||||
label = {"org.opencontainers.image.title" = "distroless-true", "org.opencontainers.image.description" = "True-command image for zero status returning", "org.opencontainers.image.licenses" = "GPLv2", "org.opencontainers.image.vendor" = "ALT Linux Team"}
|
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: false
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- distroless-true
|
|
||||||
...
|
|
@ -1,4 +1,4 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
@ -8,7 +8,7 @@ LABEL org.opencontainers.image.source="https://github.com/etcd-io/etcd"
|
|||||||
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages("etcd") }}
|
{{ install_pakages("etcd") }}
|
||||||
|
|
||||||
VOLUME /data
|
VOLUME /data
|
||||||
|
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: true
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- etcd
|
|
||||||
...
|
|
@ -1,4 +1,4 @@
|
|||||||
FROM {{ registry }}{{ branch }}/{{ alt_image }}:latest
|
FROM {{ registry }}{{ alt_image }}:{{ branch }}
|
||||||
|
|
||||||
MAINTAINER alt-cloud
|
MAINTAINER alt-cloud
|
||||||
|
|
||||||
@ -8,7 +8,7 @@ LABEL org.opencontainers.image.source="https://github.com/go-gitea/gitea"
|
|||||||
LABEL org.opencontainers.image.licenses="MIT"
|
LABEL org.opencontainers.image.licenses="MIT"
|
||||||
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
LABEL org.opencontainers.image.vendor="ALT Linux Team"
|
||||||
|
|
||||||
{{ install_packages("gitea", "openssh-server", "gosu") }}
|
{{ install_pakages("gitea", "openssh-server", "gosu") }}
|
||||||
|
|
||||||
ENV USER gitea
|
ENV USER gitea
|
||||||
ENV HOME /var/lib/gitea
|
ENV HOME /var/lib/gitea
|
||||||
|
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
is_versioned: true
|
|
||||||
version_template: "{{ version }}"
|
|
||||||
source_packages:
|
|
||||||
- gitea
|
|
||||||
...
|
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user